Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/CsB3l6VH7_I5GcSKn34MRv9rm98.roa
File: CsB3l6VH7_I5GcSKn34MRv9rm98.roa (raw, json)
Hash identifier: /OZdU79bXvRiD81ovs0rZxoMQZTaXV04mBfTAMEKLHY=
Subject key identifier: 0A:C0:77:97:A5:47:EF:F2:39:19:C4:8A:9F:7E:0C:46:FF:6B:9B:DF
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FD1D72C95A54E439BD481FD35B452A8D8
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/CsB3l6VH7_I5GcSKn34MRv9rm98.roa
Signing time: Wed 05 Aug 2026 12:12:47 +0000
ROA not before: Wed 05 Aug 2026 12:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206604
IP address blocks: 2a0d:d940:2005::/48 maxlen: 48
2a0d:d940:2007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:d7:2c:95:a5:4e:43:9b:d4:81:fd:35:b4:52:a8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 5 12:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ac07797a547eff23919c48a9f7e0c46ff6b9bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:9f:0a:10:ad:cd:8e:23:08:53:1a:da:64:
fd:ff:b6:98:9e:14:37:c0:46:07:c8:b9:37:56:1f:
8a:bb:6e:d8:de:bc:c9:64:2f:4e:15:3f:f7:11:43:
4d:dc:f5:d6:3d:4a:9e:d3:1a:c2:21:d1:25:69:31:
4e:85:a2:f8:c3:4d:d0:ec:be:62:fa:d0:39:15:7c:
d0:b9:2d:5d:e3:72:37:b2:6b:e7:2d:51:95:cc:ad:
49:04:17:a8:02:f6:b5:50:8a:38:94:e5:3d:47:5a:
5a:0a:3a:f9:29:25:3e:ed:4d:78:b7:38:c4:b6:39:
d6:ba:35:21:e7:c3:95:c7:42:f5:dc:d6:38:d9:d2:
fd:ae:5c:0a:0d:b9:46:ec:a1:d5:e3:c1:eb:14:7d:
87:85:b0:87:40:69:f9:2a:9a:89:10:ab:39:d0:ff:
39:fb:c5:7d:18:73:3d:19:1a:46:95:9a:23:f0:72:
9c:f6:96:13:7d:eb:e3:00:65:85:36:58:1d:df:7b:
62:24:8b:71:bd:70:1a:01:8f:a5:87:54:86:8b:5c:
e9:01:6b:6b:86:74:23:4a:c0:11:95:e4:5a:d9:ba:
8e:75:5a:5d:3f:34:4a:8a:dd:67:9c:bc:c0:e5:74:
41:36:03:2c:3d:f1:cf:1d:83:07:b9:b8:e0:0c:03:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C0:77:97:A5:47:EF:F2:39:19:C4:8A:9F:7E:0C:46:FF:6B:9B:DF
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/CsB3l6VH7_I5GcSKn34MRv9rm98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2005::/48
2a0d:d940:2007::/48
Signature Algorithm: sha256WithRSAEncryption
04:2f:dd:8c:83:71:dd:f0:69:cf:29:2c:c0:61:47:9d:63:a6:
15:05:f2:92:71:92:4c:36:3b:3f:a0:16:6c:3f:03:8a:8b:24:
cd:59:d2:a0:f3:bb:47:77:a3:9b:2b:c7:a1:62:2d:c5:f9:6e:
c9:57:b1:86:b7:79:d0:0f:45:67:4b:ca:28:05:31:ad:63:2d:
35:4f:15:ff:91:37:e7:bd:69:6f:c7:b0:f5:85:38:47:2b:c6:
8b:02:ab:78:e5:1c:5d:eb:85:d5:fc:1c:3f:02:e7:aa:36:b4:
e4:f6:97:33:bc:4b:a5:2c:2c:53:aa:e5:82:86:8f:63:08:84:
b5:2f:e1:38:75:d1:2b:97:dc:6e:e1:3f:4f:6a:bf:aa:6f:45:
14:86:9a:80:c8:d6:fa:5b:ba:1a:2e:da:25:cd:89:d6:52:6b:
56:6b:dc:4e:b1:59:2b:1d:a0:08:03:9c:b2:61:fa:b2:08:2f:
b5:82:16:af:fd:ff:6b:b9:b1:fa:bb:ad:43:2e:db:4b:ca:76:
c3:5a:3b:47:7f:f4:b9:dd:d7:47:76:42:fa:03:3a:59:2f:57:
74:03:9b:50:b4:d6:94:42:2a:22:39:6d:c3:0f:cf:b8:46:0b:
a4:a1:72:b6:b8:4b:7e:96:c5:90:82:d7:1b:57:0e:99:ae:58:
0b:82:b8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:55 2026 by rpki-client